CVE-2016-2318 describes a denial-of-service vulnerability in GraphicsMagick 1.3.23, affecting various distributions including Debian, openSUSE, and SUSE. A remote attacker can trigger a NULL pointer dereference by providing a specially crafted SVG file, impacting the DrawImage, SVGStartElement, and TraceArcPath functions. This vulnerability is rated Medium severity (CVSS 5.5), indicating a local attack vector with low complexity, requiring user interaction, and resulting in high availability impact. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.3.23CPE matchmatch criteria | cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.23:*:*:*:*:*:*:* | ||
8.0CPE matchmatch criteria | cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* | ||
11CPE matchmatch criteria | cpe:2.3:a:suse:linux_enterprise_debuginfo:11:sp4:*:*:*:*:*:* | ||
1.3CPE matchmatch criteria | cpe:2.3:a:suse:studio_onsite:1.3:*:*:*:*:*:*:* | ||
42.1CPE matchmatch criteria | cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.